CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

EUVD-2026-59001

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

CVE-2026-72043

This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...

CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

CVE-2026-72025 s390/monwriter: Reject buffer reuse with different data length

In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with different data length When data buffers are reused, e.g. for interval sample records, the first record determines the data length, and the size of the buffer for user copy. Current monwrit...

CVE-2026-72013 riscv: Prevent NULL pointer dereference in machine_kexec_prepare()

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

...

SUSE CVE-2026-6464

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...

CVE-2026-72025: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with different data length When data buffers are reused, e.g. for interval sample records, the first record determines the data length, and the size of the buffer for user copy. Current monwrit...

PT-2026-72871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where rxrpc recvmsg data calls rxrpc verify data when rxrpc call.rx dec buffer is unallocated, assuming it will be allocated upon a successful return. However, rxrpc veri...

CVE-2026-72043: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

PT-2026-73010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zero-copy ZC Tx batch path where the parser stops upon encountering an invalid descriptor. If this occurs after continuation descriptors, the Tx consumer may advan...

PT-2026-72907

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the peak usb component where the pcan usb fd decode buf function fails to properly validate uCAN receive record lengths when processing records packed in a USB receive...

PT-2026-72492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU issue exists in the sof ipc4 bytes put function. The copy size is derived from the existing data-size in the buffer instead of the size field of the...

PT-2026-72232

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture when the hardware page table walker PTW is enabled. The CPU may set the PAGE DIRTY bit directly in the page table entry during a write TLB...

Linux Distros Unpatched Vulnerability : CVE-2026-74558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or...

Linux Distros Unpatched Vulnerability : CVE-2026-74310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubufinfo per outstanding zerocopy TX descriptor and hands it to the backend socket. The...

CVE-2026-18403

CVE-2026-18403 - LimeSurvey Community Edition 7.0.5 has an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list. Affected component is the CPDB workflow; the underlying issue is an authe...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

EUVD-2026-58786

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...